Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/M2NIM/1/3135372e32302e3133352e302f32342d3234203d3e20313431303031.roa
File:                     3135372e32302e3133352e302f32342d3234203d3e20313431303031.roa (raw, json)
Hash identifier:          WOYBOovAsDkyK43+ASCyGIyOHFzLI6jt6PTK/EFmDKY=
Subject key identifier:   6D:1E:DA:6C:2E:99:4C:59:5A:27:90:C2:23:49:6C:B3:A3:8F:23:3B
Certificate issuer:       /CN=B5BCB843FC62D50C018D67AAECEC768693B898BB
Certificate serial:       3F82E07AA95DB2D302097536E7300B0F2BE63CB1
Authority key identifier: B5:BC:B8:43:FC:62:D5:0C:01:8D:67:AA:EC:EC:76:86:93:B8:98:BB
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/0/B5BCB843FC62D50C018D67AAECEC768693B898BB.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/M2NIM/1/3135372e32302e3133352e302f32342d3234203d3e20313431303031.roa
Signing time:             Mon 11 May 2026 17:40:30 +0000
ROA not before:           Mon 11 May 2026 17:35:30 +0000
ROA not after:            Mon 10 May 2027 17:40:30 +0000
asID:                     141001
IP address blocks:        157.20.135.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:82:e0:7a:a9:5d:b2:d3:02:09:75:36:e7:30:0b:0f:2b:e6:3c:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B5BCB843FC62D50C018D67AAECEC768693B898BB
        Validity
            Not Before: May 11 17:35:30 2026 GMT
            Not After : May 10 17:40:30 2027 GMT
        Subject: CN=6D1EDA6C2E994C595A2790C223496CB3A38F233B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:b4:ed:45:56:1a:bc:b3:e8:ef:e3:dc:0b:41:
                    cb:c0:9b:26:5c:36:71:8c:97:31:5b:0b:2a:b0:84:
                    36:4c:35:9f:23:36:cb:50:4c:d4:c0:16:b6:b5:3e:
                    c6:9a:52:cf:a8:4c:5a:8b:1d:6e:c9:79:7a:d9:78:
                    2e:b7:37:13:51:cc:93:fc:68:b4:16:09:3a:2b:bd:
                    33:8d:0c:bc:a7:ff:83:d7:ba:7f:80:5d:00:62:31:
                    76:57:03:3c:19:a3:00:36:bb:b0:f8:f3:9d:9b:d9:
                    33:44:c2:54:61:97:fc:92:12:e3:1b:0d:ff:fd:96:
                    56:4e:8d:9c:d4:ec:a3:30:ea:be:57:67:e1:a8:66:
                    b4:9e:02:ab:0c:55:8d:90:36:49:ff:72:f0:fe:38:
                    8d:2b:26:af:f1:5c:d3:99:18:ba:e9:be:56:b9:59:
                    16:85:7d:63:2f:7a:c3:b0:b2:ee:f2:c0:37:ca:23:
                    2e:6a:f6:7e:30:fb:e5:93:2f:31:26:91:a0:46:8a:
                    59:9c:7a:49:b5:82:91:a7:67:8d:6b:9d:27:7e:8e:
                    86:df:01:9b:e4:b3:28:95:a1:b2:b0:fd:b4:fd:42:
                    2f:4e:3c:a7:75:8a:cb:09:d5:d6:75:8a:6d:35:73:
                    b1:43:37:44:51:b6:17:45:69:9d:4c:32:73:2d:67:
                    8c:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:1E:DA:6C:2E:99:4C:59:5A:27:90:C2:23:49:6C:B3:A3:8F:23:3B
            X509v3 Authority Key Identifier:
                keyid:B5:BC:B8:43:FC:62:D5:0C:01:8D:67:AA:EC:EC:76:86:93:B8:98:BB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/M2NIM/1/B5BCB843FC62D50C018D67AAECEC768693B898BB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/0/B5BCB843FC62D50C018D67AAECEC768693B898BB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/M2NIM/1/3135372e32302e3133352e302f32342d3234203d3e20313431303031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.20.135.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2a:c5:19:eb:34:83:43:f0:ec:a4:1e:92:a2:4f:8e:ca:ba:22:
         d8:d7:23:b3:29:01:ac:f6:ef:4e:a7:72:d8:51:dc:03:62:0a:
         3e:1f:73:bf:0c:a6:b5:32:18:c0:5c:9a:5f:4c:0a:4f:56:b4:
         7f:ab:98:92:74:08:18:cb:80:ca:18:07:a8:97:3b:26:7a:04:
         80:0d:80:71:48:9a:c6:a9:37:68:4a:ee:09:e5:75:00:99:a8:
         cd:10:16:8f:28:74:4a:a7:0d:1f:81:62:cc:c1:38:e1:d4:0f:
         f4:5d:fc:8d:c7:c8:a2:80:58:af:b2:e8:63:1a:3e:45:47:bd:
         16:59:8a:05:ec:b2:d2:e4:57:c2:6b:db:63:49:83:5d:2c:7e:
         0d:88:76:63:8c:ca:be:7b:fc:28:f8:c8:f9:6d:dc:2e:11:ef:
         b7:42:3d:f5:17:fd:67:e8:ff:a5:93:12:06:d6:81:5d:ab:da:
         3a:12:66:ba:f9:05:4f:93:2b:6f:78:44:fb:af:75:8b:28:88:
         e2:aa:19:e1:c1:f1:e2:13:2b:17:dd:d5:10:ee:df:f8:cc:53:
         5e:f3:32:3d:80:2e:98:6c:60:df:cd:f7:fe:3a:b5:cb:a1:72:
         93:7a:4a:4b:e1:4f:e0:26:d1:83:90:65:c1:70:92:c4:87:89:
         b6:69:4a:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:40:21 2026 by rpki-client